Re: Re: ' (Single Quotes) in user inputs
| From: | Jerry Swanson | Date: | Tue, 19 Oct 2004 00:49:42 +0000 |
| Subject: | Re: Re: ' (Single Quotes) in user inputs | ||
| References: | 1 2 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-199772@lists.php.net to get a copy of this message | ||
I'm not sure that stripslashes() are used for input.
addslashes() - to insert data into database
stripslashes() - to get data from database and print it.
On 14 Oct 2004 11:19:14 +0200, Christian Jul Jensen <christian@jul.net> wrote:
> benipmiller@comcast.net (Ben) writes:
>
> > Any ideas on dealing with this would be greatly appreciated.
>
> Disable magic_quotes, and handle all escaping of characters yourself,
> I would absolutely prefer that. But beware of sql-injection.
>
> Leave magic_quotes on, and use stripslashes() on your input.
>
> --
> Christian Jul Jensen
>
>
>
> --
> PHP General Mailing List (http://www.php.net/)
> To unsubscribe, visit: http://www.php.net/unsub.php
>
>